Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--fbGKHiAX8z5KRXhbpxP8189pw.roa
File: 1--fbGKHiAX8z5KRXhbpxP8189pw.roa (raw, json)
Hash identifier: mMJgNkq+lJcyR9+5JIBKffgN9engBu1CakL5hKuqyK8=
Subject key identifier: FB:E7:DB:18:A1:E2:01:7F:33:E4:A4:57:85:BA:71:3F:CD:7C:F6:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F27718435F728530E7C802C9F009
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--fbGKHiAX8z5KRXhbpxP8189pw.roa
Signing time: Thu 02 Jan 2025 17:51:37 +0000
ROA not before: Thu 02 Jan 2025 17:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50448
IP address blocks: 194.87.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 15:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f2:77:18:43:5f:72:85:30:e7:c8:02:c9:f0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe7db18a1e2017f33e4a45785ba713fcd7cf69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:45:3e:d0:d0:f5:26:48:19:c3:ed:d2:80:
d9:30:29:1f:4e:0b:49:5e:90:7a:01:ab:9d:01:30:
c4:65:00:04:92:b1:52:97:4f:e7:c6:33:4d:20:90:
cf:42:7e:5d:1a:ee:20:36:e7:0a:a8:39:2d:5b:68:
3e:2e:83:4c:ec:36:a7:7b:c3:cc:d8:10:5b:8b:19:
aa:4b:63:84:73:ee:2b:9b:c3:8a:5b:ff:59:59:64:
b5:ff:d6:69:2f:5e:b8:29:59:69:8c:3e:71:28:63:
3e:36:13:de:3e:3a:8a:c9:07:8f:f7:b7:c2:08:5f:
df:61:92:d5:f7:05:4f:d8:79:f2:3b:5c:d6:68:38:
18:af:9d:0e:4b:9b:eb:9c:6a:4c:5c:29:cf:bb:e9:
32:b8:75:22:8a:0c:36:ea:6b:19:e4:04:99:1f:f1:
fe:4c:7d:cc:0d:ec:52:6a:6f:8e:ca:fc:9a:49:91:
3a:9e:8a:73:bd:ee:17:ed:ef:cc:49:1f:a7:8e:ae:
06:6b:8c:1a:b7:07:70:ab:c4:c3:79:65:66:74:da:
8d:72:1e:04:04:47:34:ae:d8:81:07:8c:fd:a8:8d:
a1:12:c5:3d:65:ab:ea:32:70:6c:c9:a8:36:b3:bd:
77:1e:07:46:42:62:97:3c:f8:be:f3:c8:62:e7:a2:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:DB:18:A1:E2:01:7F:33:E4:A4:57:85:BA:71:3F:CD:7C:F6:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--fbGKHiAX8z5KRXhbpxP8189pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.162.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f0:ab:90:cd:75:5b:2c:29:a9:cc:54:8f:96:57:b6:0d:68:
67:14:60:2a:89:e7:3a:d2:eb:9c:9b:74:2e:78:8c:a1:f5:4c:
79:3d:31:8c:5c:b9:ea:2f:bc:bd:29:a9:02:15:b5:3f:02:02:
e2:3c:c6:13:50:0a:5e:1e:70:6f:c3:8f:04:49:ea:e7:05:a3:
dc:dd:8f:79:6a:84:b0:6e:6e:10:39:4a:19:ce:93:fa:86:21:
30:66:5f:c9:17:0a:29:79:1a:92:0a:1a:44:f1:17:f7:d5:df:
cd:77:78:ff:38:88:f9:b7:f4:c0:83:73:24:2e:5a:00:f1:d1:
1d:d1:ad:aa:2e:f8:f5:6d:ea:0e:5a:9e:85:5c:bb:7f:79:85:
03:ee:02:2a:bc:d9:da:af:a2:2b:5d:ea:06:8e:e4:47:e4:a0:
52:a1:98:ad:d5:8a:66:5e:fa:b1:0b:4f:a9:96:34:a4:18:d8:
fd:14:66:4b:39:92:23:28:d7:3b:ac:38:40:2c:c5:05:b7:83:
35:ab:de:2f:0f:e4:1c:d0:1b:48:f4:f1:fd:f7:3a:34:25:ee:
24:39:b2:f7:37:42:30:3c:c2:92:0c:d1:bf:df:05:be:0b:15:
03:43:a3:01:39:40:98:2b:25:ca:5f:b6:61:70:a5:68:2f:9f:
10:87:49:e8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoJPJ3GENfcoUw58gCyfAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmU3ZGIxOGExZTIwMTdmMzNlNGE0NTc4NWJhNzEzZmNkN2NmNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vpFPtDQ9SZIGcPt0oDZMCkfTgtJ
XpB6AaudATDEZQAEkrFSl0/nxjNNIJDPQn5dGu4gNucKqDktW2g+LoNM7Dane8PM
2BBbixmqS2OEc+4rm8OKW/9ZWWS1/9ZpL164KVlpjD5xKGM+NhPePjqKyQeP97fC
CF/fYZLV9wVP2HnyO1zWaDgYr50OS5vrnGpMXCnPu+kyuHUiigw26msZ5ASZH/H+
TH3MDexSam+OyvyaSZE6nopzve4X7e/MSR+njq4Ga4watwdwq8TDeWVmdNqNch4E
BEc0rtiBB4z9qI2hEsU9ZavqMnBsyag2s713HgdGQmKXPPi+88hi56LJmwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvn2xih4gF/M+SkV4W6cT/NfPacMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMS0tZmJHS0hpQVg4ejVLUlhoYnB4UDgxODlwdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0
My8xL05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJXojAN
BgkqhkiG9w0BAQsFAAOCAQEAIfCrkM11WywpqcxUj5ZXtg1oZxRgKonnOtLrnJt0
LniMofVMeT0xjFy56i+8vSmpAhW1PwIC4jzGE1AKXh5wb8OPBEnq5wWj3N2PeWqE
sG5uEDlKGc6T+oYhMGZfyRcKKXkakgoaRPEX99XfzXd4/ziI+bf0wINzJC5aAPHR
HdGtqi749W3qDlqehVy7f3mFA+4CKrzZ2q+iK13qBo7kR+SgUqGYrdWKZl76sQtP
qZY0pBjY/RRmSzmSIyjXO6w4QCzFBbeDNaveLw/kHNAbSPTx/fc6NCXuJDmy9zdC
MDzCkgzRv98FvgsVA0OjATlAmCslyl+2YXClaC+fEIdJ6A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:23 2025 by rpki-client